vps

How auto-orders fire

End-to-end path of a webhook → order through Spectra's 24/7 cloud worker.

Auto-orders are how a webhook (your own server, a screener, a script alert tagged runs_on: vps) becomes a live order at your broker. The worker handles the path so your laptop doesn't have to be on.

The path

[Sender]                           HTTP POST + HMAC
    │
    ▼
[Spectra worker]
  1. Verify signature + timestamp
  2. Validate payload schema
  3. Check IP allowlist
  4. Check daily-loss cap
  5. Replay-protect
  6. Idempotency dedupe
    │
    ▼
[Broker connection]                Native API call
    │
    ▼
[Broker]                           Live order

Steps 1–6 typically complete in < 80 ms at the worker. Broker round-trip is broker-dependent — Binance is around 50 ms from EU regions, IBKR around 200 ms.

What runs on the worker

Webhook → order: incoming POSTs from external alert sources.
Script alerts tagged runs_on: vps: Alert-kind scripts that evaluate against a market data feed the worker subscribes to.
Daily-loss-cap enforcement: see Daily-loss cap.

What does not run on the worker:

Strategy backtests (those are local to your desktop).
Indicator and Drawing evaluations (chart-preview only).
Manual order ticket submissions (those route directly from desktop → broker).

Region

The worker runs in the same region as your Supabase project (EU-West default). Enterprise tier can request a dedicated region for latency or compliance.

Observability

Profile → Webhooks → secret → Activity shows the last 100 inbound POSTs with verification status, payload, and broker response. Useful for debugging — every 403 Forbidden shows which check failed.